netstat is an operating system utility that displays active TCP connections, listening ports, and network statistics. [1]

ID: S0104
Associated Software: netstat.exe
Type: TOOL
Platforms: Windows, Linux, macOS
Version: 1.0
Created: 31 May 2017
Last Modified: 17 October 2018

Techniques Used

Domain ID Name Use
Enterprise T1049 System Network Connections Discovery

netstat can be used to enumerate local network connections, including active TCP connections and other network statistics.[1]

Groups That Use This Software

ID Name References
G0049 OilRig


G0004 Ke3chang


G0018 admin@338


G0010 Turla


G0071 Orangeworm


G0096 APT41


G0116 Operation Wocao